Senior Manager - Enterprise Risk

The opportunity

Key responsibilities

• Lead development and continuous enhancement of ERM frameworks, policies, methodologies, and governance processes.
• Develop and maintain the risk appetite framework with executive leadership and stakeholders.
• Conduct enterprise risk assessments and workshops; maintain risk registers and track ownership, controls, mitigation, and remediation.
• Assess risks across IT, cloud, applications, data centres, cybersecurity, business continuity, strategic initiatives, AI, and emerging technologies.
• Partner with technical and business teams; lead vendor and third-party risk reviews, process reviews, and control effectiveness evaluations.
• Prepare executive reports, dashboards, heatmaps, risk metrics, KRIs, and maturity assessments.
• Serve as Management Representative for ISO 31000 and align practices with applicable frameworks, standards, contracts, and regulations.
• Promote risk awareness and training; use GRC tools to automate processes and optimize risk, exception, audit, compliance, and remediation workflows.
• Support audit readiness, risk treatment planning, budgeting, cloud governance, and continuous improvement.

Required qualifications

• Bachelor’s degree in IT, Risk Management, Finance, Accounting, Business Administration, or a related discipline; a master’s degree is preferred.
• At least 8 years of experience in enterprise, operational, information security, technology, cloud risk governance, or related disciplines.
• Proven experience designing, implementing, and managing ERM frameworks in complex, fast-paced organizations.
• Strong knowledge of risk methodologies, governance principles, and enterprise risk assessment techniques.
• Technical risk assessment experience across IT infrastructure, applications, cloud, data centres, cybersecurity, and AI systems.
• Knowledge of NIST, ISO 31000, COSO ERM, ISO 27001, and SOC 2.
• Experience with Azure, AWS, and hybrid cloud environments; familiarity with GRC platforms such as ServiceNow GRC, RSA Archer, or equivalent.
• Strong analytical, communication, stakeholder management, presentation, and executive reporting skills; able to collaborate across business and technical functions.

Preferred qualifications

• Relevant certifications such as CRISC, CIRM, CDPSE, ISO 31000 Risk Manager, ISO 27001 Lead Implementer, NIST RMF, or COSO ERM are preferred.
• Industry experience in AI, cloud computing, digital infrastructure, telecommunications, cybersecurity, or regulated sectors is preferred.
• Knowledge of AI governance frameworks, including ISO/IEC 42001, NIST AI RMF, and the EU AI Act, is preferred.
• Experience with dashboards, KRIs, board reporting, risk maturity assessments, DevSecOps, cloud-native architectures, resilience, business continuity, and organizational change is preferred.

Compensation and benefits

• The employer offers a competitive salary based on skills and experience and a performance-based yearly bonus.
• Benefits include Esaad and Fazaa discount cards, family health coverage including dental, vision, and life insurance, and learning and development resources.

About Core42